From 6a53b819ac6742a4d5d2de28e17329282d67a1b2 Mon Sep 17 00:00:00 2001 From: robiscool Date: Fri, 23 Apr 2010 02:19:53 -0700 Subject: snort, add default whitelist filename --- config/snort/snort.inc | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) (limited to 'config') diff --git a/config/snort/snort.inc b/config/snort/snort.inc index e6b2fa5c..892370e9 100644 --- a/config/snort/snort.inc +++ b/config/snort/snort.inc @@ -1749,8 +1749,14 @@ if ($snortunifiedlog_info_chk == on) $spoink_info_chk = $config['installedpackages']['snortglobal']['rule'][$id]['blockoffenders7']; if ($spoink_info_chk == on) { - preg_match('/^([a-zA-z0-9]+)/', $config['installedpackages']['snortglobal']['rule'][$id]['whitelistname'], $wlist_name_file); - $spoink_whitelist_name = $wlist_name_file[0]; + preg_match('/^([a-zA-z0-9]+)/', $config['installedpackages']['snortglobal']['rule'][$id]['whitelistname'], $wlist_name_file); + + if ($wlist_name_file[0] == 'default') { + $spoink_whitelist_name = 'defaultwlist'; + }else{ + $spoink_whitelist_name = $wlist_name_file[0]; + } + $spoink_type = "output alert_pf: /usr/local/etc/snort/whitelist/$spoink_whitelist_name,snort2c"; } -- cgit v1.2.3